Microsoft Certified: DevOps Engineer Expert credential artwork

Microsoft Certified: DevOps Engineer Expert (AZ-400) Exam Guide

Validates knowledge of designing DevOps solutions, including source control, build and release pipelines, security and compliance, and instrumentation.

AZ-400 tests whether you can design and implement delivery practices with GitHub and Azure DevOps. Most of the weight is on pipelines, so spend most of your time building YAML pipelines, deployment strategies and infrastructure as code yourself, then practise choosing Microsoft's recommended option among several that would work.

Understand the exam

Syllabus

Design and implement processes and communications10–15%
  1. Design and implement traceability and flow of work
  2. Design and implement appropriate metrics and queries for DevOps
  3. Configure collaboration and communication

Example scenario: Managers want to see how long work items take from first commit to production. Which metric would you put on the dashboard, and where would the data come from?

Design and implement a source control strategy10–15%
  1. Design and implement branching strategies for the source code
  2. Configure and manage repositories

Example scenario: A secret was committed to a repository three commits ago. What steps would you take to remove it and stop it happening again?

Design and implement build and release pipelines50–55%
  1. Design and implement a package management strategy
  2. Design and implement a testing strategy for pipelines
  3. Design and implement pipelines
  4. Design and implement deployments
  5. Design and implement infrastructure as code (IaC)
  6. Maintain pipelines

Example scenario: A team wants 5% of users to get a new release first, then everyone if error rates stay flat. Which deployment strategy and supporting features would you use?

Develop a security and compliance plan10–15%
  1. Design and implement authentication and authorization methods
  2. Design and implement a strategy for managing sensitive information in automation
  3. Automate security and compliance scanning

Example scenario: A pipeline deploys to Azure with a client secret stored in a variable. How would you remove the stored secret entirely?

Implement an instrumentation strategy5–10%
  1. Configure monitoring for a DevOps environment
  2. Analyze metrics from instrumentation

Example scenario: After a release, response times double for one API. Which telemetry would you check to find the slow dependency?

AZ-400 study guide · Skills measured as of July 27, 2026

Format

Questions
40–60
Duration
2h
Passing score
700 / 1000
Delivery
Test centre or online
Languages
English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese, Chinese (Traditional), Italian

Question types

Choose the best answer from the options, or the stated number of answers when a question asks for more than one.

CertUp example

A team wants every pull request to pass unit tests before it can be merged into main. What should they configure?

  1. A branch policy with build validation
  2. A scheduled pipeline run
  3. A release gate on production
  4. A repository tag
Show answer

A. A branch policy with build validation blocks the merge until the pipeline succeeds.

Eligibility and booking

An Azure Associate certification

Required

Earn Azure Administrator Associate, or hold Azure Developer Associate, to become a DevOps Engineer Expert. You can take AZ-400 before or after it.

Azure Administrator AssociatePass AZ-104
Azure Developer AssociateAlready earned; its AZ-204 exam retired on July 31, 2026

Azure administration and development experience

Recommended

Microsoft expects experience with both, strong skills in at least one, and experience implementing GitHub and Azure DevOps solutions.

Microsoft awards the Expert certification once you have passed AZ-400 and hold one of the listed Associate certifications, in either order.

Schedule AZ-400 with Pearson VUE from the exam page, using a personal Microsoft account. The Expert credential is issued once you also hold a qualifying Associate certification.

Make a study plan

Take the free practice assessment to see where you stand, then build each pipeline topic yourself in a free GitHub account and an Azure DevOps organization.

Most candidates spend 60–110 hours. Plan for the low end if you already run pipelines in GitHub Actions or Azure Pipelines; add time if you have used neither.

8 weeksto be ready
  1. 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.4 h
  2. 3Learn the core conceptsWork through one main course or book, topic by topic.48 h
  3. 4Practice with mock examsTake timed practice tests and review every mistake.24 h
  4. 5Prepare for exam dayBook the exam and check the ID and delivery rules.4 h

Learn the core concepts

The free Microsoft Learn paths cover every skill area. Practise in GitHub and Azure DevOps, which both have free tiers.

See all 4 AZ-400 courses →

Build in both tools. The exam covers GitHub Actions and Azure Pipelines side by side. Set up the same pipeline in each so you know where settings such as environments, secrets and approvals live.

Practice with mock exams

Start with Microsoft's free practice assessment. MeasureUp's official practice test adds timed full-length sets with explanations.

See all 4 AZ-400 practice tests →

Are you ready?

  • You can build a multi-stage YAML pipeline with an environment, an approval and a Key Vault secret without notes.
  • You can choose a deployment strategy for a stated risk and rollback need.
  • You score consistently on fresh timed practice sets and can explain each miss.

Prepare for exam day

Choose the checklist for your test-centre or online appointment.

Before going to the test centre

  • Bring a current government-issued ID whose name matches your Microsoft certification profile exactly.
  • Arrive early enough to check in and store your belongings.
  • Allow extra seat time on top of the 120 minutes for instructions and the closing survey.
  • If your exam has a lab, you cannot take a break in the middle of it, and lab exams take about 30 minutes longer to score.
  • You can take a break between questions, but the clock keeps running and you cannot return to questions you saw before it.
  • If you fail, you can retake after 24 hours. Later retakes need 14 days between attempts.
Pearson VUE for Microsoft

Exam duration and exam experience

Advice from exam takers